Privacy Policy

1. Introduction

Zaki LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how our mobile application, Zaki (the "App"), collects, uses, discloses, and safeguards your information.

By downloading, accessing, or using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

We collect information in two ways: information you provide directly to us and information automatically collected when you use the App.

A. Information You Provide Directly

To use certain features of the App (such as creating an account or processing a subscription), we may ask you to provide the following Personal Data:

• Identity Data: Full Name, Username.
• Contact Data: Email address.
• User Content: Any photos, text, or recipes you voluntarily upload to the App.

B. Device Permissions

To optimize your experience, the App may request access to certain features on your mobile device. You can manage these permissions at any time in your device settings.

• Camera: We use camera access to allow you to scan items, take photos of food/recipes, or update your profile picture.
• Photo Library: We access your gallery to allow you to upload existing images to the App.
• Contacts: We access your contacts only with your explicit permission to facilitate social sharing or inviting friends to the App. We do not store your contact list on our servers without consent.

C. Automated Data Collection & Third-Party SDKs

When you access the App, our servers and third-party partners automatically collect certain data, including:

• Device Information: Device model, operating system (iOS/Android) version, unique device identifiers (UDID/IDFA), and mobile network information.
• Usage Data: Details of your use of the App, such as features accessed, time spent, and crash logs.
• Location Data: General location data based on IP address (we do not collect precise GPS coordinates unless explicitly requested for a specific feature).

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To operate the App, create your account, and manage your profile.
• Transaction Processing: To manage subscriptions and in-app purchases via RevenueCat and Stripe.
• App Improvement: To analyze usage trends and fix bugs using Google Analytics and Firebase.
• Authentication: To verify your identity via Facebook Login or email authentication.
• Marketing & Advertising: To display relevant advertisements through AdMob and to send you promotional emails (which you can opt out of).
• Infrastructure: To securely host data using AWS (Amazon Web Services).

4. Data Sharing and Disclosure

We do not sell your personal data to third parties for monetary value. However, we share data with third-party service providers (Processors) who assist us in operating the App. These include:

• Cloud Infrastructure: AWS (for data hosting and storage).
• Analytics: Google Analytics and Google Firebase (to understand user behavior).
• Advertising: Google AdMob (to serve ads).
• Authentication: Facebook Login (Meta) (for account creation).
• Payments & Subscriptions: Stripe and RevenueCat (we do not store your financial information; it is processed directly by these providers).

These third parties are authorized to use your personal information only as necessary to provide these services to us.

5. Apple App Tracking Transparency (ATT)

For users on iOS 14.5+, we adhere to Apple’s App Tracking Transparency framework. We use identifiers, such as the IDFA (Identifier for Advertisers), to deliver personalized ads via AdMob and to track marketing effectiveness.

When you first launch the App, you will receive a prompt asking for permission to "Track."

• If you allow tracking: We will collect data to provide personalized advertising.
• If you ask not to track: We will not collect the IDFA, and you will see generic, non-personalized advertising.

6. International Data Transfers

The App is operated by Zaki LLC. Our servers and third-party service providers (such as AWS and Google) may be located in the United States or other countries.

If you are accessing the App from the European Economic Area (EEA) or other regions with laws governing data collection, please note that your data is being transferred to, stored, and processed in the United States. We rely on Standard Contractual Clauses (SCCs) and adequacy decisions to ensure your data remains protected during international transfers.

7. Data Retention and Security

• Security: We use administrative, technical, and physical security measures (including encryption via SSL/TLS) to help protect your personal information. However, no electronic transmission is 100% secure.
• Retention: We retain your personal data only as long as necessary to fulfill the purposes set out in this policy. If you delete your account, we will delete your personal data within 30 days, unless legally required to retain it for tax or accounting purposes.

8. Your Rights

Depending on your location, you have specific rights regarding your data.

A. For Users in the European Union (GDPR)

• Right to Access: You may request copies of your personal data.
• Right to Rectification: You may request that we correct any information you believe is inaccurate.
• Right to Erasure: You may request that we delete your personal data ("Right to be Forgotten").
• Right to Restrict Processing: You may request that we restrict the processing of your data.
• Right to Data Portability: You may request that we transfer your data to another organization.

B. For Users in California (CCPA/CPRA)

• Right to Know: You may request details about the categories of personal information we have collected and shared over the past 12 months.
• Right to Delete: You may request the deletion of your personal information.
• Right to Opt-Out: You have the right to opt out of the "sale" or "sharing" of your personal information. Note: While we do not sell data for cash, sharing data with ad networks (like AdMob) may be considered a "sale" under California law. You may opt out via your device settings.

To exercise any of these rights, please contact us at [email protected].

9. Children’s Privacy (COPPA)

The App is not intended for children under the age of 13 (or under 16 in certain jurisdictions within the EU). We do not knowingly collect personal identifiable information from children.

If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from a child without verification of parental consent, we verify remove that information from our servers.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at:

Zaki LLC Email: [email protected]